The US DOJ indicts three Russian citizens for allegedly operating Bender.io and Sinbad.io crypto mixing services used by North Korea and ransomware gangs
If you own crypto, you are complicit. [embedded post] X: Lorenzo Franceschi-Bicchierai / @lorenzofb : NEW: A year after seizing two cryptocurrency mixing services, the U.S. government is accusing three Russian citizens of money laundering for their roles in operating those websites. Two of the suspects have been arrested, one remains at large, per DOJ. https://techcrunch.com/...
Context & Ripple Effects
This case extends the U.S. campaign against Sinbad beyond service seizure and sanctions to alleged operators. In 2023, authorities sanctioned and seized Sinbad over alleged Lazarus Group use, making the indictments a move from disrupting infrastructure toward assigning individual criminal liability.
The action also fits a broader DOJ focus on alleged laundering services used by cybercriminals, following charges against Russians accused of running large-scale laundering operations. The North Korea connection gives mixer enforcement relevance beyond ordinary financial-crime cases.
First-order effects
- Two arrested defendants now face U.S. money-laundering allegations tied to Bender.io and Sinbad.io, while the third suspect remains at large, according to the DOJ.
- The case preserves pressure on the services’ alleged operator network after the prior seizure, rather than treating takedown of the sites as the end of enforcement.
Second-order effects
- Mixer operators and the exchanges or wallets interacting with them face stronger incentives to screen for exposure to sanctioned or seized services, as enforcement reaches alleged personnel as well as infrastructure.
- Ransomware and North Korea-linked laundering networks may need to replace disrupted routes, increasing the operational friction of moving crypto proceeds rather than eliminating the underlying demand for concealment.
Third-order effects
- If prosecutions continue to pair seizures, sanctions, and operator cases, crypto compliance will increasingly hinge on tracing service-level exposure and on cross-border evidence gathering—not simply identifying a transaction’s immediate counterparty.
- The pattern sharpens the crypto legitimacy gap: services designed to improve transaction privacy may face expanding legal and access constraints when authorities connect them to illicit-finance flows.
The trend: Crypto enforcement is shifting from isolated service takedowns toward sustained efforts to dismantle the people and financial pathways alleged to support cybercrime and state-linked laundering.